Adobe fixes two Flash Player vulnerabilities

By

Adobe is encouraging users of Flash Player to upgrade to the latest version to avoid falling victim to two vulnerabilities that could allow attackers to take complete system control.

Adobe fixes two Flash Player vulnerabilities
Rated "highly critical" by vulnerability tracking firm Secunia, the flaws can be corrected by upgrading to version 9.0.47.0, according to an Adobe security bulletin issued Tuesday.

One of the bugs is an input validation error that can be exploited to execute arbitrary code if a user clicks on an untrusted link and visits a malicious website, according to Adobe and Secunia advisories.

The other vulnerability can lead to a cross-site request forgery attack, which dupes a trusted user into loading a page containing a malicious request.

In this case, a bug in the Flash Player causes the HTTP referrer to be insufficiently validated.

According to Adobe, users unable to upgrade to Flash Player version 9 can continue to use a patched version of Flash Player 7.
Got a news tip for our journalists? Share it with us anonymously here.
Tags:

Most Read Articles

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

Gov to encourage vuln research, puts insurers and NFPs on notice

Gov to encourage vuln research, puts insurers and NFPs on notice

Palo Alto Networks in talks to buy CyberArk

Palo Alto Networks in talks to buy CyberArk

Allianz Life says majority of US customers' data stolen in hack

Allianz Life says majority of US customers' data stolen in hack

Log In

  |  Forgot your password?